Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/7VYhoYdSq7ruFbOX-HRLzmhh1yY.roa
File:                     7VYhoYdSq7ruFbOX-HRLzmhh1yY.roa (raw, json)
Hash identifier:          ydxzIUKewSNscPTLa6d8WHsTUOL55dsH3QNOVf0PkSo=
Subject key identifier:   ED:56:21:A1:87:52:AB:BA:EE:15:B3:97:F8:74:4B:CE:68:61:D7:26
Certificate issuer:       /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial:       0DD2
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/7VYhoYdSq7ruFbOX-HRLzmhh1yY.roa
Signing time:             Tue 29 Sep 2020 09:51:27 +0000
ROA not before:           Tue 29 Sep 2020 09:51:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        202.126.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3538 (0xdd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
        Validity
            Not Before: Sep 29 09:51:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ED5621A18752ABBAEE15B397F8744BCE6861D726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5e:56:d2:67:ba:ad:9a:26:95:b2:b6:85:db:
                    a2:9f:1d:61:e1:bf:d8:e4:d3:90:d4:f3:a0:8f:fd:
                    51:ab:e9:d9:73:a0:d1:5f:e6:87:4c:dc:7e:65:c4:
                    29:a1:e4:59:48:30:7b:9f:6b:d3:49:d5:6a:4b:bb:
                    c6:d7:86:a8:b1:ad:d0:db:14:ce:d4:87:94:06:d3:
                    d2:fa:0a:b5:55:9c:08:27:c7:bd:34:52:bf:4c:96:
                    d0:71:90:04:2b:47:0b:5b:28:3a:fd:21:aa:7d:f8:
                    29:68:ee:bd:5f:4b:dc:a0:f0:c4:79:13:91:f9:d6:
                    4a:c7:1d:a9:ce:aa:74:b5:7d:44:44:b8:ad:cc:52:
                    c9:98:53:85:b9:56:4e:97:8e:a9:53:94:7a:76:de:
                    dd:82:ba:5e:9b:81:7d:e5:ef:7e:6c:ce:2a:ac:3a:
                    0f:d9:76:f5:b4:43:dc:96:18:41:54:ae:51:ff:77:
                    89:f1:1f:40:f5:b2:d0:18:14:4c:78:f2:58:f4:fa:
                    ca:4e:6c:ae:46:a9:e9:d0:19:4b:4c:94:86:de:16:
                    1e:41:65:f0:ce:94:dc:b2:da:18:8a:62:66:ee:c9:
                    82:e9:4e:24:4c:3c:05:94:f7:81:f7:d7:ae:db:86:
                    1b:02:7e:16:19:a6:2b:29:a7:0d:dd:f1:f3:a5:9c:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:56:21:A1:87:52:AB:BA:EE:15:B3:97:F8:74:4B:CE:68:61:D7:26
            X509v3 Authority Key Identifier:
                keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/7VYhoYdSq7ruFbOX-HRLzmhh1yY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:e2:92:8e:75:ff:0a:6b:9a:63:78:2a:5d:59:c1:ce:35:
         d6:18:bb:c0:42:00:55:45:7f:0c:3c:68:67:be:13:14:db:48:
         f1:c1:b9:e3:71:93:bf:de:f4:f6:96:89:64:fa:47:1d:82:e3:
         b4:41:ea:3c:db:49:e2:b4:6a:fc:a8:c7:31:57:c0:f5:cf:eb:
         e3:48:25:c0:2d:95:f2:3b:d9:31:87:d2:23:df:b7:3a:3c:dd:
         55:d5:0e:53:92:12:d8:12:86:5a:93:c1:0f:89:4a:04:6f:df:
         05:5e:9b:1e:ff:76:9c:0b:f4:fd:0e:0f:d1:69:6c:d3:72:20:
         cb:5e:3b:f0:66:68:c1:cb:01:4e:cf:f7:47:0e:7e:e0:b6:79:
         7f:f4:c9:58:ac:af:0a:da:9f:78:56:62:43:c3:f3:fb:d6:1e:
         9e:33:0a:6e:f2:f9:35:11:4e:4e:8c:27:fe:a9:ea:d1:7e:bc:
         91:70:b7:5b:77:6e:f3:af:5a:b1:61:0a:2d:59:69:01:be:17:
         9a:d8:b4:e4:05:9a:77:8a:19:6f:8a:16:a4:f6:e7:a3:aa:c1:
         e4:65:e4:1f:b1:cc:76:f8:54:09:69:a7:ca:64:2e:1a:a9:d2:
         3f:de:86:29:17:e9:be:3b:37:b8:fa:3a:26:9d:03:f8:37:e6:
         50:dc:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----